The API now delivers an avatar URL for each user, including at
/users/self.
`bootstrap.py dbinit` defaults to generating a Gravatar URL for each
user, if no avatar is supplied in the loaded JSON file.

Multipart uploads

Add shared key drone auth, remove redundant config